A Wyoming orthopedic practice has disclosed a cyberattack that potentially exposed the personal, financial, and medical records of over 56,000 individuals.
According to the U.S. Department of Health and Human Services, Casper Orthopedic Associates PC suffered a hacking and IT incident on July 23, impacting a total of 56,197 people.
In notifications sent to affected individuals, the healthcare firm stated that an unauthorized entity accessed its systems and stole files that may include first names, last names, dates of birth, driver’s license numbers, Social Security numbers, financial account records, and medical information.
Casper stated that it discovered it was the victim of a cyberattack by an unauthorized third party on or about May 23, 2026. The firm immediately engaged third-party cybersecurity experts to contain and remediate the incident, and also notified law enforcement.
The company's investigation concluded on June 11, 2026, determining that sensitive information may have been acquired from its systems. Following an in-depth review process to identify impacted individuals and their addresses, which concluded on September 2, 2026, Casper began notifying affected parties on September 8, 2026.
Casper reported that it has found no evidence that any individual's information has been specifically misused. In response to the incident, the practice has implemented additional safeguards, tightened physical security, and advised affected patients to contact major credit reporting agencies including Equifax, Experian, and TransUnion.
